Commit Graph
10 Commits
Author SHA1 Message Date
Thanakorn 8705be0d1b Enforce roles on admin endpoints and return real status codes
- users, SMTP and batch-lock endpoints are owner/admin only
- engines answer 400/403/404/409/500 instead of 200 with an error body;
  database errors no longer leak to the client
2026-09-24 14:53:40 +07:00
Thanakorn e579dd596c Start every session through session.php; idle timeout, app access and auth status codes 2026-09-24 14:30:35 +07:00
Thanakorn S 17a62e50e4 add missing roleGuards 2026-05-27 09:19:52 +07:00
Thanakorn S 5ca6b49fd0 code audit fixes: require_once, issue flow, role guards 2026-05-23 17:06:08 +07:00
Thanakorn S db5c47b6ca Reports 2026-04-29 17:04:11 +07:00
Thanakorn S 2061624641 [OOP] contact,inventory,ics,dashboard 2026-04-28 15:44:57 +07:00
Thanakorn S 3d3b497c08 ReportManager Class 2026-04-28 14:35:42 +07:00
Thanakorn S 3cc5baba3f Lot, Serial, ExpiryDate 2026-04-25 14:37:00 +07:00
Thanakorn S 35dd1a9fce more OOP and restructure utils 2026-04-22 15:55:18 +07:00
Thanakorn S 3b8f94f011 stock dash 2026-04-09 09:48:47 +07:00